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Listing of Claims: 

1 . (Previously Presented) A method for collecting network usage data of a 
user, comprising the following steps: 

(1) an access device authenticating and authorizing the user, and an 
Authentication, Authorization and Accounting Server (hereinafter referred to as AAA server) 
recording the user's network resource information authenticated and authorized, the user's 
network resource information comprising a user's account number, a start time and a stop time of 
network access, an IP address, a network access location, and a service attribute; 

(2) a router, during network access, recording network usage information, and 
sending the network usage information to a NetStream Collector (NSC) with User Datagram 
Protocol messages, the network usage information comprising a source IP address, a destination 
IP address, a source port number, a destination port number, a number of bytes, and a timestamp; 

(3) the NSC aggregating the collected network usage information; and 

(4) an association analysis server performing real-time association analysis for 
the aggregated network usage information and the user's network resource information uploaded 
from the AAA server to obtain detailed network usage data of the user, the association analysis 
comprising matching the IP address and a start time and a stop time of network access in the 
user's network resource information to the IP address and the timestamp in the network usage 
information to determine the user corresponding to the network usage information. 

2. (Previously Presented) The method according to claim 1, wherein the 
access device in step (1) is one of a LAN switch, an access server, and an IP phone gateway. 

3. (Previously Presented) The method according to claim 1, wherein step (1) 
in which the access device authenticates and authorizes the user and the AAA server records the 
user's network resource information comprises the following steps: 

(1) the access device sending the user's authentication and authorization data 
to the AAA server; 
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(2) the AAA server analyzing and recording the user's authentication and 
authorization data, and sending control information of the network access permission to the 
access device; 

(3) the access device allocating resources to the user and sending the user's 
network resource information to the AAA server, which records the user's network resource 
information; and 

(4) the AAA server forwarding the user's network resource information to the 
association analysis server in real time. 

4. (Previously Presented) The method according to claim 3, wherein in step 
(3)of claim 3, the resources allocated by the access device to the user comprise an IP address, 
and a start time and a stop time of network access. 

5. (Previously Presented) The method according to claim 3, wherein in step 
(3) of claim 3, the resources allocated by the access device to the user comprise an IP address, a 
start time and a stop time of network access, and bandwidth. 

6. (Canceled) 

7. (Canceled) 

8. (Canceled) 
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